General

  • Target

    Trojan-Proxy.Win32.Qukart.vij-56e5fa43fd366a5873450234c9273fa1da440e39d3affc39d084f4b50273725f

  • Size

    55KB

  • Sample

    240229-ltrt8adf67

  • MD5

    ce93a0ed2bb396dfc76fc2e8a8401bd1

  • SHA1

    d194474cc4889f20198a32d824543a5cf9d1ff47

  • SHA256

    56e5fa43fd366a5873450234c9273fa1da440e39d3affc39d084f4b50273725f

  • SHA512

    747264874ace5a28cb1a91a083a87abea07c53e0890efda691074fefd37c479f1abe92d1eb7e97352aff43051c3502834a3e70e8f6e62ab5ec554c03317cc1f8

  • SSDEEP

    1536:OHGJXV7xez7p01+IaWX8WyHZBaDzfCW9cFb1mu:OHGguw9WXjDjCpFRmu

Score
10/10

Malware Config

Targets

    • Target

      Trojan-Proxy.Win32.Qukart.vij-56e5fa43fd366a5873450234c9273fa1da440e39d3affc39d084f4b50273725f

    • Size

      55KB

    • MD5

      ce93a0ed2bb396dfc76fc2e8a8401bd1

    • SHA1

      d194474cc4889f20198a32d824543a5cf9d1ff47

    • SHA256

      56e5fa43fd366a5873450234c9273fa1da440e39d3affc39d084f4b50273725f

    • SHA512

      747264874ace5a28cb1a91a083a87abea07c53e0890efda691074fefd37c479f1abe92d1eb7e97352aff43051c3502834a3e70e8f6e62ab5ec554c03317cc1f8

    • SSDEEP

      1536:OHGJXV7xez7p01+IaWX8WyHZBaDzfCW9cFb1mu:OHGguw9WXjDjCpFRmu

    Score
    10/10
    • Adds autorun key to be loaded by Explorer.exe on startup

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks